Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title></title>
<%
ID=Request.Querystring("ID")
TypeId=session("TypeId")
Thispage ="http://" & Request.ServerVariables("SERVER_NAME")& Request.ServerVariables("URL")
%>
</head>

<body style="width:800px;">
<%
Temp=split(ID,"FT")
Set rs1=Server.CreateObject("ADODB.Recordset")
set fs=Server.CreateObject("Scripting.FileSystemObject")
ft=Temp(1)
sql1="select id,CName from menu where Cid="&ft&" order by sort"
rs1.Open sql1,conn,1,3

do while not rs1.eof
%>
<table width="800" border="0">
  <tr>
    <td width="300"><img  style="width:300px; height:3px; background-color:#00a0e9" /></td>
    <td width="200" style="text-align:center"><font style="color:#e4007e"><%=rs1("CName")%></font></td>
    <td width="299"><img  style="width:299px; height:3px; background-color:#00a0e9" /></td>
  </tr>
</table>
  <table style="width:800px; border:0; text-align:left;">
  <tr>
  
<%
Set rs2=Server.CreateObject("ADODB.Recordset")
'sql2="select  [ProductNum] from [productlist] where [TypeID] in(select [id]

'from [menu] where [Cid] in(select [id] from [menu] where [Cid]=2))" 
sql2="select top 4 ProductNum from productlist  where  SecondType="&rs1("id")&" order by ID desc"
'response.Write(sql2)
rs2.Open sql2,conn,1,3
  do while not rs2.eof
  LL=left(rs2("ProductNum"),3)
  RR=right(rs2("ProductNum"),3)

'product=product+rs2("ProductNum")

'response.Write(product)

'Temp=split(product,",")
'i=ubound(Temp)

'for a=0 to 3
'LL=left(Temp(a),3)
'RR=right(Temp(a),3)

'ͼƬ����
ImgUrl="http://buyyou.net/ASC365_canada/Admin/" & LL & "/" & RR &"/" & "0000.gif"
'�۸�
GGprice=Server.MapPath("../../Admin/"& LL & "/"& RR &"/GGPrice.inc")
                If (fs.FileExists(GGPrice))=true then
                Set f=fs.OpenTextFile(GGprice, 1)  
                P0=trim(f.ReadLine) 'code
				P1=trim(f.ReadLine) '������
				P2=trim(f.ReadLine) '��С������
				P3=trim(f.ReadLine) '����
				P4=trim(f.ReadLine) '����US$
				P5=trim(f.ReadLine) '����------------------
				P6=trim(f.ReadLine) '���------------------
				P7=trim(f.ReadLine) '��λ
				P8=trim(f.ReadLine) '��վ����---------------
				P9=trim(f.ReadLine) '����RMB
				P10=trim(f.ReadLine) '����ע
				P11=trim(f.ReadLine) '��ע--------------------
				f.Close: Set f=Nothing
				if len(p5)=0 then p5=0  
                end if
				if isnumeric(p5)=true and isnumeric(p4)=true then  
				CKJ= Round(p5 * p4,2)
				end if 
				
'����
Tech=Server.MapPath("../../Admin/"& LL & "/"& RR &"/Tech.inc")
		If (fs.FileExists(Tech))=true then
			Set f=fs.OpenTextFile(Tech, 1)
			T0=trim(f.ReadLine)
			T1=trim(f.ReadLine)
			T2=trim(f.ReadLine)
			f.Close: Set f=Nothing
		end if 
		
%>

<td>
<table style="width:150px; text-align:left" >
<tr >
<td>
<table style="width:150px; height:150px" border="1" cellpadding="0" cellspacing="0"  bordercolor="#00a0e9">
<tr>
<td>
<a href="<%=Thispage&"?ID=PD"&rs2("ProductNum")%>"><img border="0"  style=" border-color:#00a0e9" src="<%=ImgUrl%>" width="150" height="150"

align="middle"></a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td style="text-align:center">
<p style="font:Verdana; font-size:10px"><%=T2%></p>
</td>
</tr>
<tr>
<td style="text-align:center">
 <p  style="font:Verdana; font-size:16px">Price($):<%=p6%></font></p>
</td>
</tr>
</table>

</td>
  <%
  a=0
  LL=""
  RR="" 
  product=""
  i=0
  rs2.movenext
loop
rs2.Close
set rs2=Nothing
  %>
  
  </tr>
  </table>
  <%
  rs1.movenext
  loop
  rs1.Close
  set rs1=nothing
  conn.Close
  set conn=nothing
  %>

</body>
</html>